wushenghua/sub2api
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
Files
2de6ccb0716d72bb545d86cc31763666246d830d
sub2api/backend/internal/handler
T
History
shaw 0ddd58aaf9 feat(security): 操作审计日志 + 会话IP/UA绑定 + 敏感操作 step-up 2FA 
应对管理员访问凭证失守导致的数据外泄风险，新增三层防护：

审计日志（admin-only 可见，用户不可见）
- 新增 append-only audit_logs 表（migration 180）+ 异步批量写入 + 保留期清理
- 审计中间件挂在 admin/user/auth/admin-payment 组认证之后：记录所有变更类
  请求 + 白名单敏感读取（账号/代理导出、备份下载、admin/user API key 读取）
- 请求头凭证首尾掩码；请求体 JSON 递归脱敏（api_key/password 等擦除，base_url
  保留以便追责）；非 JSON body 不入库
- 无单条删除；全量清空需现场 TOTP 校验、拒绝 admin API key、未启用 2FA 不允许，
  清空后同步写入留痕记录

会话 IP/UA 绑定（默认开启，可在系统设置关闭）
- JWT 携带 session id + IP/UA 指纹哈希；IP 或 UA 任一变化即撤销会话家族并要求
  重新登录；旧 token 无指纹时放行以平滑升级

敏感操作 step-up 2FA（sudo 窗口 15 分钟）
- 账号/代理导出、DB 备份创建/下载、S3 目标修改要求近期 TOTP 二次验证；admin API
  key 一律拒绝；前端 useStepUp 组合式 + TotpStepUpDialog 弹码后自动重试
- API key 查看按需求暂不加强管控

前端：新增 /admin/audit-logs 操作日志页面（筛选/详情/2FA 清空）、侧边栏入口、
step-up 弹窗接入导出与备份流程、安全设置项（绑定开关 + 日志保留天数）、zh/en i18n
2026-07-16 13:47:50 +08:00
..
admin
feat(security): 操作审计日志 + 会话IP/UA绑定 + 敏感操作 step-up 2FA
2026-07-16 13:47:50 +08:00
dto
feat(security): 操作审计日志 + 会话IP/UA绑定 + 敏感操作 step-up 2FA
2026-07-16 13:47:50 +08:00
quotaview
feat(quota): 用户 × 平台 USD 配额
2026-05-26 10:49:20 +08:00
announcement_handler.go
…
api_key_handler.go
fix: return 404 instead of 403 for unauthorized key access to prevent ID oracle (CWE-204)
2026-06-02 00:46:50 +08:00
auth_current_user_test.go
fix(profile): stabilize identity binding management
2026-04-22 13:19:28 +08:00
auth_dingtalk_client_test.go
feat(dingtalk): 钉钉 OAuth 登录接入与 internal_only 用户属性同步
2026-05-19 15:27:47 +08:00
auth_dingtalk_client.go
feat(dingtalk): 钉钉 OAuth 登录接入与 internal_only 用户属性同步
2026-05-19 15:27:47 +08:00
auth_dingtalk_oauth_test.go
feat(dingtalk): 钉钉 OAuth 登录接入与 internal_only 用户属性同步
2026-05-19 15:27:47 +08:00
auth_dingtalk_oauth.go
fix(auth): apply promo codes to oauth signups
2026-06-11 18:55:27 +08:00
auth_email_oauth_test.go
fix(auth): apply promo codes to oauth signups
2026-06-11 18:55:27 +08:00
auth_email_oauth.go
fix(auth): apply promo codes to oauth signups
2026-06-11 18:55:27 +08:00
auth_handler.go
feat(security): 操作审计日志 + 会话IP/UA绑定 + 敏感操作 step-up 2FA
2026-07-16 13:47:50 +08:00
auth_linuxdo_oauth_test.go
feat(security): 操作审计日志 + 会话IP/UA绑定 + 敏感操作 step-up 2FA
2026-07-16 13:47:50 +08:00
auth_linuxdo_oauth.go
feat: fix OAuth email completion flow
2026-06-30 01:11:51 +08:00
auth_oauth_logout_test.go
fix(auth): harden pending oauth and backend mode flows
2026-04-22 12:30:00 +08:00
auth_oauth_pending_flow_test.go
feat(security): 操作审计日志 + 会话IP/UA绑定 + 敏感操作 step-up 2FA
2026-07-16 13:47:50 +08:00
auth_oauth_pending_flow.go
fix(auth): apply promo codes to oauth signups
2026-06-11 18:55:27 +08:00
auth_oauth_test_helpers_test.go
fix(oidc): harden verified-email fast path
2026-05-21 15:19:29 +08:00
auth_oidc_oauth_test.go
fix(oidc): harden verified-email fast path
2026-05-21 15:19:29 +08:00
auth_oidc_oauth.go
fix(auth): apply promo codes to oauth signups
2026-06-11 18:55:27 +08:00
auth_session_revocation_test.go
feat(quota): 用户 × 平台 USD 配额
2026-05-26 10:49:20 +08:00
auth_wechat_oauth_test.go
feat(quota): 用户 × 平台 USD 配额
2026-05-26 10:49:20 +08:00
auth_wechat_oauth.go
fix(auth): apply promo codes to oauth signups
2026-06-11 18:55:27 +08:00
available_channel_handler_test.go
fix: 高峰倍率全链路透传、计费术语修正与边界处理
2026-07-01 17:46:12 +08:00
available_channel_handler.go
feat(billing): 渠道自定义定价支持图片输入 token 单价 image_input_price
2026-07-15 09:35:34 -07:00
batch_image_handler.go
fix(batch-image): 修复审计发现的计费死锁、状态机与队列原子性缺陷
2026-07-07 18:53:56 +08:00
channel_monitor_user_handler.go
feat(channel-monitor): add feature switch settings + fix extra_models save
2026-04-21 00:21:29 +08:00
chat_completions_image_model_test.go
fix(openai): reject image models on chat completions
2026-07-15 22:22:51 +08:00
concurrency_error_response_test.go
fix: classify concurrency acquire failures
2026-05-28 10:03:41 +00:00
concurrency_error_response.go
fix: move user wait queue accounting off hot path
2026-06-16 11:41:54 +08:00
content_moderation_helper.go
feat(risk-control): add content moderation audit
2026-05-07 09:14:47 +08:00
endpoint_test.go
Revert "feat: 支持异步生图任务与结果轮询"
2026-07-16 09:47:27 +08:00
endpoint.go
Revert "feat: 支持异步生图任务与结果轮询"
2026-07-16 09:47:27 +08:00
failover_loop_test.go
fix(gateway): 客户端断开后 failover 静默终止，不再误报 502 账号耗尽
2026-07-15 09:29:05 +08:00
failover_loop.go
fix(gateway): 客户端断开后 failover 静默终止，不再误报 502 账号耗尽
2026-07-15 09:29:05 +08:00
gateway_handler_billing_error_test.go
feat(quota): 用户 × 平台 USD 配额
2026-05-26 10:49:20 +08:00
gateway_handler_cancellation_test.go
fix(grok): fail over OAuth credential errors safely
2026-07-14 14:55:30 +08:00
gateway_handler_chat_completions.go
fix(openai): reject image models on chat completions
2026-07-15 22:22:51 +08:00
gateway_handler_error_fallback_test.go
fix: avoid double-writing error frame on non-stream upstream errors
2026-06-09 22:46:06 +08:00
gateway_handler_intercept_test.go
fix(gateway): intercept max_tokens=1 haiku probes for streaming requests too
2026-06-11 20:46:47 +08:00
gateway_handler_responses.go
fix(grok): allow passive Codex image tool declarations
2026-07-16 00:16:21 +08:00
gateway_handler_stream_failover_test.go
增加测试
2026-03-15 16:21:49 +08:00
gateway_handler_usage_test.go
Keep usage ranges consistent across API and dashboards
2026-07-13 11:35:46 +08:00
gateway_handler_warmup_intercept_unit_test.go
增加调度分组生命周期租约
2026-07-15 00:12:40 +08:00
gateway_handler.go
feat: 增加 API Key 计费倍率自省接口
2026-07-15 22:42:53 +08:00
gateway_helper_backoff_test.go
test: 为代码审核修复添加详细单元测试（7个测试文件，50+测试用例）
2026-02-07 22:14:07 +08:00
gateway_helper_fastpath_test.go
fix(openai-ws): bound ingress session lifecycle
2026-07-13 15:32:42 +08:00
gateway_helper_hotpath_test.go
Merge pull request #3645 from bestony/worktree/lucky-harbor-dbe4
2026-07-06 16:45:15 +08:00
gateway_helper_test.go
fix(grok): fail over OAuth credential errors safely
2026-07-14 14:55:30 +08:00
gateway_helper.go
fix(grok): fail over OAuth credential errors safely
2026-07-14 14:55:30 +08:00
gateway_key_billing_test.go
feat: 增加 API Key 计费倍率自省接口
2026-07-15 22:42:53 +08:00
gateway_key_billing.go
feat: 增加 API Key 计费倍率自省接口
2026-07-15 22:42:53 +08:00
gateway_models_test.go
fix(gateway): honor Anthropic custom models list
2026-07-05 08:35:34 +08:00
gemini_cli_session_test.go
fix(gateway): harden digest logging and align antigravity ops
2026-02-07 17:12:15 +08:00
gemini_v1beta_handler_test.go
fix(handler): fallback known gemini models on v1beta 404
2026-04-01 02:20:13 +08:00
gemini_v1beta_handler.go
fix(gateway): 客户端断开后 failover 静默终止，不再误报 502 账号耗尽
2026-07-15 09:29:05 +08:00
grok_media_test.go
fix: recognize grok media models
2026-07-01 11:43:35 +08:00
grok_media.go
Merge remote-tracking branch 'origin/main' into feat/upstream-rate-scheduling
2026-07-16 10:31:21 +08:00
handler.go
feat(security): 操作审计日志 + 会话IP/UA绑定 + 敏感操作 step-up 2FA
2026-07-16 13:47:50 +08:00
idempotency_helper_test.go
feat(idempotency): 为关键写接口接入幂等并完善并发容错
2026-02-23 12:45:37 +08:00
idempotency_helper.go
feat(idempotency): 为关键写接口接入幂等并完善并发容错
2026-02-23 12:45:37 +08:00
image_concurrency_limiter_test.go
feat(quota): 用户 × 平台 USD 配额
2026-05-26 10:49:20 +08:00
image_concurrency_limiter.go
feat: add OpenAI image generation controls
2026-05-05 03:26:54 +08:00
logging.go
chore(logging): 完成后端日志审计与结构化迁移
2026-02-12 19:01:09 +08:00
no_account_error_test.go
fix(grok): diagnose unavailable models by platform
2026-07-13 10:11:34 +08:00
no_account_error.go
fix(grok): diagnose unavailable models by platform
2026-07-13 10:11:34 +08:00
openai_alpha_search.go
Merge remote-tracking branch 'origin/main' into feat/upstream-rate-scheduling
2026-07-16 10:31:21 +08:00
openai_body_limit_failover_test.go
test(openai): validate body-limit error envelope
2026-07-16 00:52:26 +08:00
openai_chat_completions.go
Merge remote-tracking branch 'origin/main' into feat/upstream-rate-scheduling
2026-07-16 10:31:21 +08:00
openai_codex_models_handler_test.go
fix: fail over Codex manifest accounts
2026-07-13 20:36:37 +08:00
openai_codex_models_handler.go
fix: fail over Codex manifest accounts
2026-07-13 20:36:37 +08:00
openai_embeddings.go
Merge remote-tracking branch 'origin/main' into feat/upstream-rate-scheduling
2026-07-16 10:31:21 +08:00
openai_gateway_compact_body_signal_test.go
fix: 保留 remote_compaction_v2 原生 Responses 链路
2026-07-11 12:51:53 +08:00
openai_gateway_compact_log_test.go
fix(openai-ws): make first-message timeout configurable
2026-07-14 22:40:05 +08:00
openai_gateway_count_tokens.go
feat: 按上游计费倍率调度 OpenAI 账号
2026-07-16 00:40:46 +08:00
openai_gateway_credential_failover_loop_test.go
fix(grok): harden OAuth pool recovery
2026-07-14 14:55:30 +08:00
openai_gateway_credential_failover_test.go
fix(grok): fail over OAuth credential errors safely
2026-07-14 14:55:30 +08:00
openai_gateway_cyber_test.go
feat(openai): cyber_policy 硬阻断全链路透传、审计与计费
2026-06-12 01:47:01 +08:00
openai_gateway_endpoint_normalization_test.go
refactor: migrate all handlers to shared endpoint normalization middleware
2026-03-15 22:13:42 +08:00
openai_gateway_first_output_timeout_test.go
fix(openai): bound native responses first output wait
2026-07-15 13:01:16 +08:00
openai_gateway_handler_test.go
Merge pull request #4384 from wp-a/fix/openai-model-scoped-transient-cooldown
2026-07-16 09:33:09 +08:00
openai_gateway_handler.go
Merge remote-tracking branch 'origin/main' into feat/upstream-rate-scheduling
2026-07-16 10:31:21 +08:00
openai_gateway_usage_context_test.go
Preserve usage request context
2026-05-28 22:44:25 +08:00
openai_grok_image_intent_gate_test.go
fix(grok): allow passive Codex image tool declarations
2026-07-16 00:16:21 +08:00
openai_image_intent_hint_test.go
复用请求级图片生成意图判断
2026-07-15 04:20:11 +08:00
openai_images_controls_test.go
feat: add OpenAI image generation controls
2026-05-05 03:26:54 +08:00
openai_images_failover_test.go
test: fix grok oauth validation suite
2026-06-26 10:36:09 +08:00
openai_images.go
fix(openai): scope transient cooldowns by model
2026-07-15 22:52:35 +08:00
openai_quota_platform_contract_test.go
fix(openai): preserve quota platform in usage billing
2026-06-28 11:13:09 +08:00
openai_responses_failover_cancel_test.go
fix(gateway): 客户端断开后 failover 静默终止，不再误报 502 账号耗尽
2026-07-15 09:29:05 +08:00
openai_stream_validation_test.go
fix: validate stream field type
2026-06-03 14:18:12 +08:00
openai_stream_validation.go
fix: validate stream field type
2026-06-03 14:18:12 +08:00
ops_capture_writer_nil_test.go
修复 compact 心跳 writer 生命周期
2026-07-12 04:53:41 +08:00
ops_error_logger_attribution_test.go
feat(ops): 错误日志 key 归因与早退字段补全
2026-06-05 14:00:57 +08:00
ops_error_logger_cyber_test.go
feat(openai): cyber_policy 硬阻断全链路透传、审计与计费
2026-06-12 01:47:01 +08:00
ops_error_logger_test.go
fix(ops): 记录固化 200 SSE 流上的就地错误，修复流内限流不进错误看板
2026-07-08 02:51:51 +00:00
ops_error_logger.go
fix(grok): fail over OAuth credential errors safely
2026-07-14 14:55:30 +08:00
page_handler_test.go
Fix image billing size normalization
2026-05-12 15:21:31 +08:00
page_handler.go
Add admin compliance acknowledgement gate
2026-06-10 14:16:51 +08:00
payment_handler_resume_test.go
fix(payment): 删除泄露内部 AI 渠道配置的废弃接口
2026-07-13 15:22:39 +08:00
payment_handler.go
feat(payment): 订阅套餐支持币种标注，区分 $ 符号对应币种
2026-07-15 11:17:45 +08:00
payment_webhook_handler_test.go
feat: add Airwallex payments and multi-currency support
2026-05-11 11:17:26 +08:00
payment_webhook_handler.go
feat: add Airwallex payments and multi-currency support
2026-05-11 11:17:26 +08:00
redeem_handler.go
…
request_body_limit_test.go
…
request_body_limit.go
fix(gateway): cap lenient json normalization
2026-07-09 11:15:52 +08:00
request_body_parse_log_test.go
fix(gateway): 记录请求体解析失败的真实原因，不再吞错
2026-07-07 13:53:39 +08:00
request_body_parse_log.go
fix(gateway): 记录请求体解析失败的真实原因，不再吞错
2026-07-07 13:53:39 +08:00
setting_handler_public_test.go
feat(settings): support dual-mode wechat oauth defaults
2026-04-21 20:36:10 +08:00
setting_handler.go
fix(group): harden peak-rate config handling and label peak windows with server timezone
2026-07-02 16:11:07 +08:00
stream_error_event_test.go
style: fix lint errors in response.failed SSE writer
2026-05-25 18:16:46 +08:00
stream_error_event.go
test: cover endpoint wildcard edge cases
2026-07-07 10:20:23 +08:00
subscription_handler.go
…
totp_handler.go
feat(security): 操作审计日志 + 会话IP/UA绑定 + 敏感操作 step-up 2FA
2026-07-16 13:47:50 +08:00
usage_handler_daily_test.go
feat(usage): 记录并展示失败请求(用户端+管理端)
2026-06-05 14:00:57 +08:00
usage_handler_request_type_test.go
fix: split Grok image and video pricing
2026-07-08 13:50:49 +08:00
usage_handler_sort_test.go
feat(table): 表格排序与搜索改为后端处理
2026-04-09 18:14:28 +08:00
usage_handler.go
fix: split Grok image and video pricing
2026-07-08 13:50:49 +08:00
usage_record_submit_task_test.go
Preserve usage request context
2026-05-28 22:44:25 +08:00
user_handler_test.go
feat(usage): 在 /admin/usage 支持查看已删除用户的历史使用情况
2026-05-30 17:52:18 +08:00
user_handler.go
feat(quota): 用户 × 平台 USD 配额
2026-05-26 10:49:20 +08:00
user_msg_queue_helper.go
feat(gateway): 双模式用户消息队列 — 串行队列 + 软性限速
2026-03-03 01:05:11 +08:00
user_platform_quotas_handler_test.go
feat(quota): 用户 × 平台 USD 配额
2026-05-26 10:49:20 +08:00
wire.go
feat(security): 操作审计日志 + 会话IP/UA绑定 + 敏感操作 step-up 2FA
2026-07-16 13:47:50 +08:00